Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130302e302f32342d3234203d3e203631333137.roa
File:                     3139392e39312e3130302e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          C6uHuBJw+BRj2IaCko6ZJ6LcUEPRrHQEv4j33LljRwQ=
Subject key identifier:   0C:3A:DA:A8:51:3D:09:BC:25:29:29:97:60:F6:89:B2:02:10:97:63
Certificate issuer:       /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial:       6B3B1E59C439972761CE2C970A7A29A6BB82FA75
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130302e302f32342d3234203d3e203631333137.roa
Signing time:             Sat 23 Sep 2023 17:38:15 +0000
ROA not before:           Sat 23 Sep 2023 17:33:15 +0000
ROA not after:            Sat 21 Sep 2024 17:38:15 +0000
asID:                     61317
IP address blocks:        199.91.100.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 23 Jun 2024 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:3b:1e:59:c4:39:97:27:61:ce:2c:97:0a:7a:29:a6:bb:82:fa:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
        Validity
            Not Before: Sep 23 17:33:15 2023 GMT
            Not After : Sep 21 17:38:15 2024 GMT
        Subject: CN=0C3ADAA8513D09BC2529299760F689B202109763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d2:7b:86:9a:ef:66:5e:eb:5e:f1:c8:11:ca:
                    02:61:0b:b6:e7:31:31:a6:40:e5:0e:69:e3:3a:16:
                    28:9a:ae:91:1c:49:c2:11:d5:d1:30:85:be:3f:6c:
                    83:cd:a0:dc:a9:09:cc:a3:b2:02:70:ba:b7:2a:1f:
                    ec:5c:46:f6:a3:d0:9f:f2:8b:e3:ec:8e:76:48:4b:
                    5b:33:d0:ba:4e:46:86:ea:70:88:0b:1f:7e:7d:e2:
                    05:62:03:0b:83:35:0b:28:5d:04:06:f1:40:f3:8d:
                    dc:d8:c0:dc:8f:60:41:15:c0:f5:6d:a6:9a:ac:51:
                    3c:a4:cc:54:e4:1f:7e:ad:3b:db:6c:f3:1b:c2:51:
                    5b:28:c1:61:4e:59:6d:10:6f:07:5f:c1:37:30:5e:
                    5b:95:bb:a1:e6:f7:72:d9:38:17:e2:1f:e8:3f:cf:
                    86:dd:ec:57:ea:9c:ab:f8:27:99:5a:4a:ab:9f:17:
                    6b:af:b8:47:ec:23:4e:8e:f4:dc:16:08:c0:3e:15:
                    2f:4d:59:d8:83:dc:26:6e:76:4d:32:bb:1b:d1:9f:
                    44:06:c7:b9:e8:01:df:ef:bd:09:90:52:6f:e2:6e:
                    3f:38:3f:f5:97:9d:0c:2a:8a:38:cd:e4:65:65:59:
                    e5:3c:26:ff:37:51:9e:a4:a3:3b:58:50:76:1e:b0:
                    52:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:3A:DA:A8:51:3D:09:BC:25:29:29:97:60:F6:89:B2:02:10:97:63
            X509v3 Authority Key Identifier:
                keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130302e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:8a:ba:e3:78:56:68:88:21:46:5d:72:ec:e9:71:a7:3b:29:
         60:7a:10:1b:41:ea:fc:5a:ce:12:a6:3a:a9:7f:54:ab:91:b8:
         4b:43:0d:7d:91:4f:a7:db:68:2c:a2:b9:e4:ed:ef:e4:a5:cb:
         79:e2:c7:1c:26:90:34:fc:0b:a2:27:ef:cc:5a:b6:6d:33:7c:
         3f:66:95:87:06:df:26:29:41:7d:af:99:14:04:1b:86:00:dc:
         4f:c0:e4:37:a7:a6:69:ba:33:3e:b0:9d:83:ca:b3:94:fd:67:
         aa:0b:d1:99:50:bd:d0:93:95:8c:76:91:28:08:69:3b:78:7b:
         81:ee:71:97:cb:96:db:99:ca:e0:ec:2e:00:0f:6c:c2:10:fd:
         2c:4b:02:54:31:85:a6:c5:18:46:4d:e1:0a:ca:d1:08:9c:86:
         73:48:7a:13:6d:5d:5d:fb:ca:6b:82:50:4d:b1:a7:e8:4b:09:
         3e:ca:46:8b:2f:46:45:1d:57:af:ed:16:2e:69:cf:90:bf:01:
         16:06:b3:2d:9b:84:73:44:d2:46:c5:2e:c0:22:48:ed:b1:4e:
         16:de:5e:7d:34:95:d8:93:fa:be:7e:5c:e9:c0:47:4c:6c:8b:
         b0:0a:29:a8:bf:9f:07:f4:68:ff:03:9f:f4:40:92:9a:8b:80:
         c8:59:c6:f7
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUazseWcQ5lydhziyXCnoppruC+nUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzRmN2E0NWEzYTUxMGRlOTE4ZjZkZGY3Y2NhMWRmNTNk
MzJkZDllYjA1NjRlZDVjZmIwHhcNMjMwOTIzMTczMzE1WhcNMjQwOTIxMTczODE1
WjAzMTEwLwYDVQQDEygwQzNBREFBODUxM0QwOUJDMjUyOTI5OTc2MEY2ODlCMjAy
MTA5NzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9J7hprvZl7r
XvHIEcoCYQu25zExpkDlDmnjOhYomq6RHEnCEdXRMIW+P2yDzaDcqQnMo7ICcLq3
Kh/sXEb2o9Cf8ovj7I52SEtbM9C6TkaG6nCICx9+feIFYgMLgzULKF0EBvFA843c
2MDcj2BBFcD1baaarFE8pMxU5B9+rTvbbPMbwlFbKMFhTlltEG8HX8E3MF5blbuh
5vdy2TgX4h/oP8+G3exX6pyr+CeZWkqrnxdrr7hH7CNOjvTcFgjAPhUvTVnYg9wm
bnZNMrsb0Z9EBse56AHf770JkFJv4m4/OD/1l50MKoo4zeRlZVnlPCb/N1GepKM7
WFB2HrBSAQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFAw62qhRPQm8JSkpl2D2ibIC
EJdjMB8GA1UdIwQYMBaAFO0jZRmOunSSeBSVFuPHbFCUrpk/MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODhlMzliZmEwMTg5MjcwNGQ1ZjMzMmViLzAv
RUQyMzY1MTk4RUJBNzQ5Mjc4MTQ5NTE2RTNDNzZDNTA5NEFFOTkzRi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2UxNmMyZWU2LWVlOTQtNGFlMy1hNmY3LWNjYjc3NmVmNzVhMi83NGY3
YTQ1YTNhNTEwZGU5MThmNmRkZjdjY2ExZGY1M2QzMmRkOWViMDU2NGVkNWNmYi5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4ZTM5YmZhMDE4OTI3
MDRkNWYzMzJlYi8wLzMxMzkzOTJlMzkzMTJlMzEzMDMwMmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzYzMTMzMzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMdbZDANBgkqhkiG9w0BAQsF
AAOCAQEAUoq643hWaIghRl1y7OlxpzspYHoQG0Hq/FrOEqY6qX9Uq5G4S0MNfZFP
p9toLKK55O3v5KXLeeLHHCaQNPwLoifvzFq2bTN8P2aVhwbfJilBfa+ZFAQbhgDc
T8DkN6emabozPrCdg8qzlP1nqgvRmVC90JOVjHaRKAhpO3h7ge5xl8uW25nK4Owu
AA9swhD9LEsCVDGFpsUYRk3hCsrRCJyGc0h6E21dXfvKa4JQTbGn6EsJPspGiy9G
RR1Xr+0WLmnPkL8BFgazLZuEc0TSRsUuwCJI7bFOFt5efTSV2JP6vn5c6cBHTGyL
sAopqL+fB/Ro/wOf9ECSmouAyFnG9w==
-----END CERTIFICATE-----